Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File:                     lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier:          ItiYKsF/DbR7V+YUU/kWrlTNlQVwde0TmKkVSE0vYPE=
Subject key identifier:   C6:5B:FE:54:0C:9E:3A:E0:7A:71:CA:6D:26:3A:F7:AE:55:E3:DE:68
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer:       /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial:       01901DEAFA2A714C6F036473CA92B23F5468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number:          08DF
Signing time:             Sat 15 Jun 2024 22:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:57 +0000
Files and hashes:         1: 1-G1sxKyCjtbC2VvyuGBhZes7Qg.roa (hash: 9jZg5bMijYW9BxT5hinrF0KTK0qqqcnj9BnyPR9wjbI=)
                          2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: xSinBTQvcgf8qDkCV+xfrqJJXwj0Obz9XU9LYqvUXsA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:fa:2a:71:4c:6f:03:64:73:ca:92:b2:3f:54:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
        Validity
            Not Before: Jun 15 22:00:57 2024 GMT
            Not After : Jun 16 22:00:57 2024 GMT
        Subject: CN=c65bfe540c9e3ae07a71ca6d263af7ae55e3de68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bc:47:56:bf:7f:dd:5d:b7:98:bc:33:93:48:
                    df:fe:cf:39:91:f3:5d:5c:48:88:20:b4:58:08:05:
                    71:d6:3c:96:78:2c:06:4e:55:0b:92:f6:4e:ae:a2:
                    04:b0:30:46:c8:3b:82:0c:6b:9f:8f:19:77:27:54:
                    d4:26:da:35:b1:12:a7:32:88:db:e0:dc:ec:3c:2d:
                    18:2c:28:d1:c1:34:f6:b0:91:5e:e3:65:63:3f:1a:
                    fb:cb:69:8b:7f:08:76:24:fc:13:53:cc:79:b2:85:
                    85:aa:6c:1e:49:6c:30:3a:98:6a:6e:23:86:57:15:
                    83:66:56:22:66:50:0a:89:fe:ab:5f:ae:0d:47:c5:
                    d8:28:b6:23:4c:c8:9f:b9:8f:f0:9e:eb:37:f7:16:
                    31:54:6f:2d:71:96:46:45:e0:0f:59:16:e8:85:9a:
                    da:46:9a:4c:30:90:7f:d2:75:10:d7:2c:3d:84:ac:
                    60:26:1f:5f:e0:22:6b:02:84:4a:08:dd:48:3f:cb:
                    dd:cb:51:9a:59:be:15:17:88:e3:ec:0a:61:9b:ad:
                    4c:81:a7:32:73:8e:8a:f7:eb:ea:83:0d:37:3c:dc:
                    d1:b8:89:89:38:8e:18:88:1c:e2:d7:37:e5:5e:ce:
                    75:77:ad:35:ae:c2:b5:c9:37:73:b4:8c:b5:dc:e9:
                    ce:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5B:FE:54:0C:9E:3A:E0:7A:71:CA:6D:26:3A:F7:AE:55:E3:DE:68
            X509v3 Authority Key Identifier:
                keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:62:06:28:92:65:c4:ac:78:84:d3:0d:f4:c0:2a:52:60:d6:
         68:bc:60:c3:30:31:ee:23:83:9d:88:22:15:28:12:ed:55:ce:
         13:09:fc:22:fc:1a:22:0d:68:3b:89:3e:13:8e:88:63:f6:d1:
         e6:6d:bc:3c:ce:2b:9e:e0:45:99:c7:ee:f6:9e:bf:af:f4:9f:
         c2:df:d6:31:36:42:aa:11:e1:79:fc:3f:99:9f:b0:07:a4:98:
         cd:4c:79:f5:b8:20:36:6d:c7:2e:39:d2:4f:6f:a1:39:7a:2e:
         34:ed:c1:ca:9b:7b:d0:9a:b4:f2:f1:9a:9d:06:7b:91:1d:1c:
         4a:5d:3a:95:17:af:2e:63:73:3c:91:08:4a:21:fb:32:a2:c5:
         69:2c:bc:e3:87:ed:0f:56:a2:95:e9:25:06:29:6f:ec:d9:f3:
         94:9c:22:71:a9:45:dd:7f:dc:29:dd:cf:6b:64:db:7b:c6:35:
         83:62:eb:23:8d:09:ec:33:ff:b7:c6:3f:ad:99:3f:cc:91:0a:
         24:41:94:17:dc:ef:18:2b:6d:46:ed:3f:ee:4f:81:43:7b:cf:
         5e:66:27:f7:bb:9c:05:3f:38:3b:3c:e8:17:dd:46:07:19:8d:
         5b:d4:36:db:3a:04:7d:16:cd:9e:9b:8b:37:74:1d:ea:da:6a:
         8a:8d:cc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:50 2024 by rpki-client on console-fra.rpki-client.org